Senior SOC Lead — Incident Commander & Threat Hunter

Tek Dallas Inc.; Irving (TX); On-site; USD 140,000 - 230,000; Full time

Job summary

Tek Dallas Inc. in Irving, TX seeks a senior Security Operations Center leader to direct investigation and response for critical security incidents.

You will act as technical lead or incident commander, perform advanced forensics and malware analysis, and drive proactive threat hunting while mentoring Level 1/2 analysts and aligning with Legal, Privacy, and IT to reduce risk. You will own the SOC detection lifecycle, validate detections, and design Cortex XSOAR workflows to improve telemetry and

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field, or equivalent experience.
• 6+ years in cybersecurity with at least 4 years in SOC, IR, or threat hunting.
• Proven leadership in complex, high-severity incidents and incident command.
• Strong proficiency with SIEM/EDR and cloud attack techniques.

Responsibilities

• Lead complex and critical incident response with real-time decision making.
• Act as technical lead or incident commander for ransomware, BEC, data exfiltration, insider threats.
• Perform advanced forensic analysis on endpoints, memory, and cloud environments.
• Provide incident briefings to management and stakeholders.
• Lead post-incident reviews and remediation of root causes.
• Design and lead threat hunts based on intelligence and MITRE coverage.
• Develop detection engineering and Cortex XSOAR workflows.

Skills

Incident response leadership

Threat hunting

SOC automation

Python/PowerShell

SPL queries

Forensics & malware analysis

Windows/Linux/AD security

Mentoring analysts

On-call readiness

Executive communication

Education

Bachelor's degree or higher in Cybersecurity/CS/IT

Tools

SIEM (Splunk ES)

EDR (Palo Alto Cortex)

SOAR (Cortex XSOAR)

ServiceNow/Jira

Volatility memory forensics

Ghidra reverse engineering

KAPE/Velociraptor

Job description

Tek Dallas Inc. in Irving, TX seeks a senior Security Operations Center leader to direct investigation and response for critical security incidents.

You will act as technical lead or incident commander, perform advanced forensics and malware analysis, and drive proactive threat hunting while mentoring Level 1/2 analysts and aligning with Legal, Privacy, and IT to reduce risk. You will own the SOC detection lifecycle, validate detections, and design Cortex XSOAR workflows to improve telemetry and